Error: rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
File:                     00oZ5jEGlkvQLLLYrRgH35prGQE.mft (raw, json)
Hash identifier:          BWhwnwW/oW0kDo31iUZM79uavpY4uucueyXIG1YWVAU=
Subject key identifier:   79:5C:A4:97:DB:6C:66:07:68:5D:72:6A:10:69:11:3E:E3:47:8A:B5
Authority key identifier: D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01
Certificate issuer:       /CN=F36D987FRI/serialNumber=D34A19E63106964BD02CB2D8AD1807DF9A6B1901
Certificate serial:       5B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
Manifest number:          59
Signing time:             Tue 13 Oct 2026 05:46:01 +0000
Manifest this update:     Tue 13 Oct 2026 05:46:00 +0000
Manifest next update:     Thu 15 Oct 2026 05:46:00 +0000
Files and hashes:         1: 00oZ5jEGlkvQLLLYrRgH35prGQE.crl (hash: efQpZ3xaTP49/NX1rTCbC0imgeO1bJh5D/U7KfLoucQ=)
                          2: 2D3A58E2844A11F191A58113CF1D38B0.roa (hash: B/vvT2Jfc++6xpCJZfkdlYiPhk3yse5YiJZ7AjLkKmk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
                          rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FRI, serialNumber=D34A19E63106964BD02CB2D8AD1807DF9A6B1901
        Validity
            Not Before: Oct 13 05:46:00 2026 GMT
            Not After : Oct 15 05:46:00 2026 GMT
        Subject: CN=6acdc599-53c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:f7:9f:9d:18:53:68:8b:1f:cd:68:e8:41:
                    78:c8:0c:90:2b:c8:14:28:b8:e2:3e:58:6e:6f:f9:
                    b8:c0:38:89:db:9c:02:8e:92:a3:45:28:f6:86:2f:
                    d0:42:8c:f5:a9:43:36:f5:7c:fc:1c:00:f1:27:b5:
                    e8:55:68:d9:50:36:7a:3f:34:4b:ef:38:1f:dc:16:
                    81:07:8e:68:23:02:f0:35:c8:48:91:b2:bc:87:50:
                    9b:27:a3:7e:03:90:b0:9d:51:5c:67:b6:c4:d0:ec:
                    91:14:4e:56:61:1d:e4:3d:e1:5e:4a:4b:76:af:55:
                    b8:cd:b1:36:fd:ae:53:d7:31:19:c4:de:e8:67:ab:
                    d0:8e:01:cf:fb:64:48:6f:77:76:bb:9c:ea:bb:b9:
                    47:23:eb:d9:31:5d:92:3a:3c:73:2d:60:82:83:bc:
                    11:3b:07:a8:f3:1f:b5:78:52:ee:dd:38:53:a5:40:
                    06:c3:db:76:27:8a:46:59:92:e1:ef:db:b7:70:ac:
                    eb:5b:22:4d:3e:ad:17:07:c0:64:9a:72:b1:2c:f7:
                    f8:d7:a2:59:1d:bc:e7:fe:b3:f6:d6:76:fa:40:a5:
                    4d:94:2a:93:1c:4d:98:42:cc:ce:b8:b7:ee:4c:33:
                    eb:7b:be:0f:78:0e:ff:5d:23:f4:33:28:dd:8c:55:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5C:A4:97:DB:6C:66:07:68:5D:72:6A:10:69:11:3E:E3:47:8A:B5
            X509v3 Authority Key Identifier:
                keyid:D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:49:ca:f2:86:00:df:f8:ac:99:20:b4:bf:6f:47:f5:13:4d:
         06:3d:77:96:99:7b:c6:a2:1d:e1:81:95:5f:ec:17:46:4d:52:
         20:b8:d9:a9:70:9b:86:0e:27:62:fd:a0:6f:24:01:6b:e2:38:
         c8:84:9d:b0:44:e3:0e:52:7b:20:15:83:7b:8e:2b:c6:9f:9c:
         83:8e:ea:8c:43:89:d5:84:f6:4e:da:e6:a3:7c:ef:3e:26:61:
         c7:85:5c:5e:a5:7f:a3:af:24:73:87:f8:c7:83:c6:e6:da:96:
         e9:7d:c3:0f:bd:57:f1:ad:7c:8b:3f:c2:48:4a:9a:6b:ec:5f:
         1a:b9:be:62:66:21:8b:c7:09:5e:30:1c:77:bd:9a:8f:31:7a:
         43:7d:c7:7a:3e:4d:47:c9:64:40:b1:75:14:e3:72:10:3b:22:
         fc:14:f3:4d:c4:b2:d4:63:32:87:0a:56:bc:97:12:eb:fe:36:
         2d:b8:89:ad:fd:e8:8e:e4:a5:52:f6:fa:81:74:af:49:ba:50:
         2e:8e:6f:14:f5:51:cb:0f:7d:bd:ba:60:a5:f9:8d:35:0f:cd:
         8c:1a:16:91:e6:dc:c4:6c:60:42:57:60:66:f5:b0:91:71:8d:
         ae:13:bc:12:93:9e:9d:20:bc:e8:96:1d:16:ac:2e:b3:52:e0:
         d0:d5:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:32:53 2026 by rpki-client